From owner-freebsd-hackers@FreeBSD.ORG  Sat Sep  6 18:58:37 2003
Return-Path: <owner-freebsd-hackers@FreeBSD.ORG>
Delivered-To: freebsd-hackers@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 0CB4316A4BF
	for <freebsd-hackers@freebsd.org>;
	Sat,  6 Sep 2003 18:58:37 -0700 (PDT)
Received: from hysteria.spc.org (hysteria.spc.org [195.206.69.234])
	by mx1.FreeBSD.org (Postfix) with SMTP id B241E43FBD
	for <freebsd-hackers@freebsd.org>;
	Sat,  6 Sep 2003 18:58:35 -0700 (PDT)
	(envelope-from bms@hysteria.spc.org)
Received: (qmail 12798 invoked by uid 5013); 7 Sep 2003 01:55:11 -0000
Date: Sun, 7 Sep 2003 02:55:10 +0100
From: Bruce M Simpson <bms@spc.org>
To: "Daniel C. Sobral" <dcs@newsguy.com>
Message-ID: <20030907015510.GG29217@spc.org>
Mail-Followup-To: Bruce M Simpson <bms@spc.org>,
	"Daniel C. Sobral" <dcs@newsguy.com>,
	Kris Kennaway <kris@obsecurity.org>, freebsd-hackers@freebsd.org
References: <3F589E94.1080508@xwave.com>
	<20030905154646.GA59881@rot13.obsecurity.org> <20030906213428.GF29217@spc.org>
	<3F5A8FDB.3050507@newsguy.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <3F5A8FDB.3050507@newsguy.com>
User-Agent: Mutt/1.4.1i
Organization: SPC
cc: freebsd-hackers@freebsd.org
cc: Kris Kennaway <kris@obsecurity.org>
Subject: Re: PUzzling sshd behaviour
X-BeenThere: freebsd-hackers@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Technical Discussions relating to FreeBSD
	<freebsd-hackers.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-hackers>,
	<mailto:freebsd-hackers-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-hackers>
List-Post: <mailto:freebsd-hackers@freebsd.org>
List-Help: <mailto:freebsd-hackers-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-hackers>,
	<mailto:freebsd-hackers-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sun, 07 Sep 2003 01:58:37 -0000

On Sat, Sep 06, 2003 at 10:54:35PM -0300, Daniel C. Sobral wrote:
> Bruce M Simpson wrote:
> >On Fri, Sep 05, 2003 at 08:46:46AM -0700, Kris Kennaway wrote:
> >>The fact that sshd requires reverse IP resolution is well-known
> >>behaviour.  It's probably the most common FAQ about sshd ("Why is my
> >>login taking 60 seconds to present the password prompt?").
> >
> >But what about:
> >     VerifyReverseMapping
> >             Specifies whether sshd should try to verify the remote host 
> >             name
> >             and check that the resolved host name for the remote IP 
> >             address
> >             maps back to the very same IP address.  The default is ``no''.
>
> AFAIK, that means the reverse mapping result will not be held against 
> you. :-)

This sounds like a bug. Does anyone else agree?

BMS